Privacy Policy

Service identity, acceptance and contact

The Brain · AGEIS is a founder-operated software service in pre-launch development; no separate legal company has yet been incorporated. It is not YouTube, Google, or an endorsed YouTube partner. The Brain · AGEIS uses YouTube API Services for the features described in this policy.

This Privacy Policy is linked from the public service and account-creation flow. A user must affirmatively accept this Privacy Policy before creating an account and accessing API Client features through that account.

Privacy questions, complaints and API-compliance requests: support@ageis.io.

Information we access, collect and store

• Account and business data: information a user provides to operate The Brain, such as account identity, business profile, missions, approvals and generated artifacts.
• Public YouTube API Data: permitted public channel, video, playlist, metadata and statistics fields used for bounded creator research and diagnostics.
• Authorized Google/YouTube data: only data covered by the Google OAuth scopes the user explicitly grants for the requested feature, including owner-authorized channel or analytics information where that feature is enabled.
• Independently calculated analytics: AGEIS calculations derived from permitted inputs only where the applicable YouTube policy and approved use case allow that calculation; these are labelled as AGEIS calculations rather than YouTube-supplied metrics.
• Operational and security evidence: consent receipts, authorization status, API-call evidence, timestamps, audit events, session/security events and policy/version references needed to operate and protect the service.

How YouTube API Data is used and processed

• Creator/channel diagnostics and owner-authorized account management.
• Bounded display and validation of permitted public YouTube API source observations. In STANDARD mode, AGEIS does not perform approval-gated cross-channel derived analytics over non-authorized YouTube API Data.
• Evidence-backed content strategy, recommendations and governed experiments.
• Owner-authorized analytics only when the user separately grants the required read-only Analytics scope. Live YouTube publishing is currently disabled in the customer product and the active customer connection flow does not request youtube.upload.

The Brain does not use YouTube API access to recreate YouTube, bypass YouTube restrictions, expose unrelated creators' private analytics, or represent AGEIS-created calculations as metrics supplied by YouTube.

Sharing, service providers, third-party content and advertising

The Brain does not sell Google user data or YouTube API Data. Access is limited to service providers/processors necessary to deliver authorized features, security and infrastructure under applicable controls. Google/YouTube user data is not made available for unrelated advertising profiles.

AGEIS does not currently allow third parties to serve advertisements through the API Client and does not use YouTube API Data for interest-based advertising. Third-party services may deliver operational content or processing only when necessary for the requested service and subject to the applicable data-use and provider controls.

AI model providers and human review

Where an AI reasoning or drafting feature is enabled, relevant user-provided instructions, permitted business context and requested content may be processed by the selected AI service provider, including Anthropic Claude via its commercial API. AGEIS must apply the applicable source rights, privacy, tenant authorization and data-minimization controls before including connected-platform data in a model request. A connected Google/YouTube account alone is not authorization to disclose unrelated private Google user data to an AI provider.

AI-generated responses are identified as AI-assisted content in the interactive assistant, and significant financial, legal, healthcare, employment or editorial decisions require qualified human review; AGEIS does not offer these as autonomous consumer-advice services. Provider terms, regions, subprocessor information and retention obligations must be rechecked before enabling a new model or processing category.

Cookies, device access and similar technologies

The API Client and service providers needed to operate it may store, access or collect information directly or indirectly on or from a user's device or browser, including by placing, accessing or recognizing cookies or similar technologies. AGEIS currently uses strictly necessary cookies or similar browser storage for authentication/session security, OAuth and CSRF state, security controls and service preferences. Optional analytics, personalization or marketing trackers are not activated unless the deployed consent controls can govern them.

Current consent-category status is published at Privacy / Consent Preferences.

Google / YouTube authorization and scopes

The Brain never asks for or stores a Google password. Google OAuth requests only scopes used by the selected feature. The current standard YouTube connection requests youtube.readonly; the separately selected owner-analytics flow additionally requests yt-analytics.readonly. The active customer connection flow does not request youtube.upload while live publishing is disabled. Identity scopes may be used to bind authorization to the correct account.

OAuth credentials are stored through the protected credential path and are not displayed as plaintext to other users.

Retention, refresh and derived analytics

YouTube-sourced fields are distinguished from analytics calculated independently by AGEIS. Approval-dependent derived analytics over non-authorized public YouTube API Data and any extended public-statistical retention remain disabled unless and until YouTube approves the applicable Analytics & Reporting use case for the reviewed Google Cloud project.

Non-Authorized YouTube API Data is not stored for more than 30 calendar days; it is deleted or refreshed within that period. Authorized data that is subject to a 30-day refresh/delete rule is deleted or refreshed within 30 calendar days. Where YouTube policy permits longer retention of owner-authorized Analytics/statistical data, AGEIS still reconfirms the user's authorization at least every 30 days and refreshes current source state. A failed authorization/revocation check triggers deletion of stored Authorized YouTube API Data. Revoked sessions, ephemeral security artifacts, consent receipts and deletion receipts follow the published AGEIS retention controls described in Data Rights.

YouTube content, collection and attribution controls

AGEIS does not scrape YouTube or Google applications and does not obtain scraped YouTube data. Without YouTube's prior written approval, AGEIS does not download, import, back up, cache or store copies of YouTube audiovisual content, and it does not offer offline playback of YouTube content.

Where AGEIS displays YouTube-sourced videos, channels, playlists, thumbnails, players or other YouTube content, the interface identifies YouTube as the source and preserves the applicable YouTube attribution and brand features. AGEIS does not combine Authorized Data across unrelated content owners.

How to delete stored data and revoke Google access

Disconnect Google/YouTube: an authenticated user can disconnect the Google/YouTube connection from the product's Connections controls. AGEIS immediately attempts to revoke the Google token, deletes the Brain-side OAuth token bundle, deletes stored Authorized YouTube API Data tied to that authorization, closes the related consent state and requires fresh consent before reconnecting. Authorized Data is deleted as soon as possible and, in all cases, no later than seven (7) calendar days after revocation; the current disconnect implementation performs the local deletion immediately.

Revoke directly at Google: a user can independently remove AGEIS access from the Google Account connections/security page at https://myaccount.google.com/connections?filters=3,4&hl=en. Google's YouTube API Developer Policies also identify the Google security settings page at https://security.google.com/settings/security/permissions; either route lets the user manage or remove the API Client's Google authorization.

Delete stored account and Authorized Data: use the authenticated Data & Privacy controls to submit an account-deletion request. The YouTube connection and stored Authorized YouTube API Data are purged immediately when that request is submitted; the wider AGEIS account then has a 24-hour cooling-off period before full account finalization. Users who need help with deletion may also contact support@ageis.io.

Deleting data stored by AGEIS does not delete data or content stored by YouTube. To delete content or data from YouTube itself, use a YouTube application or another authorized API Client that supports that YouTube deletion action.

Meta (Facebook Pages and Instagram), TikTok and LinkedIn connections

This section covers connections to Meta (Facebook Pages and Instagram professional accounts), TikTok and LinkedIn. It is separate from, and does not change, the Google / YouTube sections of this policy. These connections are read-only: The Brain does not post, publish, delete, message or reply on your behalf through them. They are being prepared and are not open to customers until the relevant platform has approved the AGEIS app for the permissions below; where a connection is not yet available, no data is collected through it. The Brain never asks for or stores your Facebook, Instagram, TikTok or LinkedIn password: you give consent on the platform's own screen.

Purpose. Data from these connections is used only to diagnose and report on your own accounts for your own business inside The Brain (content and engagement analysis, strategy and recommendations). It is not sold, not used for advertising or interest-based profiling, and not used to build audiences or profiles of other people.

Meta: Facebook Pages and Instagram

• Facebook Pages (permissions pages_show_list, pages_read_engagement, pages_read_user_content, read_insights): the list of Pages you manage so you can choose one; that Page's posts and their engagement figures; aggregate comment totals (not the identities of people who commented); and read-only Page and post insights such as views.
• Instagram professional accounts (permissions instagram_basic and instagram_manage_insights, reached through the linked Facebook Page): your profile, media list (images, videos, carousels), captions, links and publish times, and read-only media insights such as views, reach, likes, comments and saves where Meta returns them.
• Instagram professional accounts must be linked to a Facebook Page. Audience demographics are not requested.

TikTok

• Permissions user.info.basic and video.list: your TikTok open id, display name and avatar (to bind the connection to your account), and the list of your public videos with titles, cover images, share links, creation times and public counts (views, likes, comments).
• The Brain does not read your drafts or private videos, does not request follower statistics, and stores video metadata and provenance only, not copies of the videos.

LinkedIn

• Permissions openid, profile and r_member_social: your LinkedIn member id, your name and locale (used only to label the connection and choose the language of diagnostics), and your own posts: their text, publish dates and public social actions (reactions, comments, reshares).
• The Brain does not request organization (company Page) analytics through this connection and does not post on your behalf.

Sharing

Data from these connections is visible only to your own workspace and to the service providers needed to run the features you use, under the controls described in the sections above (including, where an AI feature is enabled, the AI model provider rules above). Access tokens are stored in encrypted form through the protected credential path and are never shown to other users.

Retention and deletion

• Stopping access: remove AGEIS from the connected apps in the platform's own settings (on Facebook and Instagram, under Settings, then Apps and Websites; on TikTok and LinkedIn, under the settings for apps and services you have allowed), or email support@ageis.io from your account email address and ask us to disconnect the platform; we then remove the stored access tokens for that connection and close the related consent record, so The Brain can no longer read from that account.
• Stopping access does not by itself delete the posts, videos and figures already collected for your workspace. That collected data is kept while your account is active so your history and reports remain available, until you ask us to delete it.
• To delete the collected data, email support@ageis.io from your account email address and ask us to delete the data from a specific connection, or your whole account (which erases all data connected to it, including data collected through these connections). We confirm by email and complete verified requests within 30 days.
• Deleting data held by AGEIS does not delete anything on Facebook, Instagram, TikTok or LinkedIn themselves.
• Step-by-step instructions are on the Data Deletion Instructions page.

Our use of information received from Meta, TikTok and LinkedIn is also subject to each platform's own terms and developer policies: Meta Privacy Policy, TikTok Privacy Policy and LinkedIn Privacy Policy.

Your controls

• Review and accept the current Privacy Policy and Terms before account creation.
• Choose which connected capability to authorize and review the scopes requested by Google.
• Disconnect/revoke Google or YouTube access from AGEIS and from Google Account settings.
• Export eligible account/business data through governed data-right controls.
• Request account deletion through the governed deletion workflow.
• Stop Meta, TikTok or LinkedIn access and request deletion of the data collected through them; see Data Deletion Instructions.

Google and YouTube policies

Our use of information received from Google APIs adheres to the Google API Services User Data Policy and applicable YouTube API Services Terms and Developer Policies.